CVE-2026-19535 is a CSRF vulnerability in the LuCI web interface of Advantech EKI-1242IEIMS devices running firmware version V1.06.01 or earlier. An attacker can exploit this issue remotely without authentication to trick an authenticated administrator into executing unintended state-changing operations, thereby gaining unauthorized access to privileged management features. The vulnerability affects all firmware versions from initial up to and including V1.06.01. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

Successful exploitation allows a remote attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, potentially compromising device management functions and control. This can lead to unauthorized configuration changes or other privileged actions within the affected device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should minimize exposure of the device's web interface to untrusted networks and ensure that authenticated sessions are protected against CSRF attacks through available mitigations such as using secure session management and browser security features.